Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa
File:                     9485cf81-084e-3d3e-8edb-007a5ff6e337.roa (raw, json)
Hash identifier:          ORc0Dcyh5L6Wp6tX5l+eZ4qRV83S3Y/ibkDnTwZE0GE=
Subject key identifier:   3E:DF:48:23:54:AC:7E:91:7F:DB:93:BB:DA:7A:AD:63:8F:09:81:60
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584A66C069FA0863078CFBB4E000
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     970
IP address blocks:        2605:f440:5600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:69:fa:08:63:07:8c:fb:b4:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=21f58d17-f7ab-4b59-9cb3-b8d92a824717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:6c:f6:e9:48:4f:93:97:44:bd:f6:22:91:
                    99:6f:ac:3a:42:8c:17:88:1e:1e:b2:44:cb:d4:a8:
                    6c:f4:c8:43:60:4a:b9:3e:d8:86:3f:ea:3f:3d:2a:
                    64:01:c6:76:0f:d7:d7:bb:fe:ed:7d:18:27:3c:04:
                    bb:9f:a2:03:71:9e:73:a3:f5:f4:2d:5b:4f:72:d2:
                    22:85:15:c4:91:36:21:66:26:4c:56:56:47:2d:fe:
                    0b:1c:20:63:3e:21:56:96:55:67:d5:c8:3a:11:a8:
                    b1:d6:09:06:af:83:96:9c:85:d4:5b:5c:84:01:b9:
                    0f:3c:5b:c4:5c:40:59:7e:4a:24:7d:c3:a8:c5:1d:
                    ab:68:ec:0a:b0:29:39:34:36:ec:c2:95:e9:86:be:
                    53:f8:3f:fd:0b:90:0c:b8:af:66:f6:a2:8b:3e:75:
                    a0:a1:72:ca:42:06:53:9f:3a:16:fc:07:14:c6:15:
                    0c:3c:c8:5a:83:30:30:e9:7a:89:a5:28:71:1e:08:
                    e1:ce:b0:77:85:c7:39:ac:93:1b:68:f8:f4:57:95:
                    bb:a7:da:e9:36:8b:4d:18:a7:13:2a:3f:0d:80:ce:
                    d6:66:e2:e5:cf:ea:90:8c:6e:97:3f:1d:69:12:d7:
                    f4:ba:91:a6:1e:ec:67:36:e8:76:04:7e:57:6d:34:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DF:48:23:54:AC:7E:91:7F:DB:93:BB:DA:7A:AD:63:8F:09:81:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/9485cf81-084e-3d3e-8edb-007a5ff6e337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:e5:2e:8e:e4:14:c7:af:13:0b:bf:bc:fa:74:08:b4:90:
         1c:9d:df:8b:ee:94:1e:07:0b:42:08:ad:7d:82:5c:e1:9f:8f:
         99:84:98:3c:69:66:4d:8d:7f:de:5d:92:68:8b:bb:97:f3:18:
         4a:72:45:2d:17:3c:11:3a:90:d6:8a:19:f1:e6:2f:92:bd:d6:
         42:dd:8c:7d:3b:79:ae:c7:48:35:b4:a2:af:87:2d:51:5b:a1:
         b5:1f:01:6f:0c:fa:c8:a5:b4:c6:bd:63:47:b5:f0:b5:d0:60:
         77:61:26:e0:4c:fe:ef:22:d2:6d:49:60:a5:75:79:33:67:6b:
         08:d8:3f:ac:eb:58:14:ca:c1:66:08:71:de:7b:8e:0d:3a:f5:
         22:12:dd:ad:76:da:99:b6:3f:2d:c1:41:48:e4:e7:f9:36:95:
         01:30:a6:5e:30:ba:85:e6:4e:96:89:06:04:26:5e:2d:81:64:
         d1:b0:ea:f4:7e:f2:b5:19:1f:dc:04:c9:1e:e3:28:b8:07:be:
         be:b9:90:08:21:39:5a:df:c0:9c:dd:3d:4f:48:5c:45:dc:e2:
         96:70:aa:f5:00:ff:4a:44:e1:4c:02:23:a8:09:f1:1c:c7:7e:
         16:dc:d1:83:0b:60:d7:e2:c4:3a:a0:83:e4:16:88:fe:e0:b2:
         07:d5:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:21 2025 by rpki-client